πŸ”

CLF-C02 β€” questions

Page 2 of 36 Β· 719 total questions.

Topic 1 Β· Question 21

Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?

  • AAWS Direct Connect (correct answer)
  • BVPC peering
  • CAWS VPN
  • DAmazon Route 53
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS Direct Connect

Explanation

AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS.

Topic 1 Β· Question 22

Which option is a physical location of the AWS global infrastructure?

  • AAWS DataSync
  • BAWS Region (correct answer)
  • CAmazon Connect
  • DAWS Organizations
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: AWS Region.

Topic 1 Β· Question 23

A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks. Which pillar of the AWS Well-Architected Framework is supported by these goals?

  • AReliability
  • BSecurity (correct answer)
  • COperational excellence
  • DPerformance efficiency
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Security.

Topic 1 Β· Question 24

What is the purpose of having an internet gateway within a VPC?

  • ATo create a VPN connection to the VPC
  • BTo allow communication between the VPC and the internet (correct answer)
  • CTo impose bandwidth constraints on internet traffic
  • DTo load balance traffic from the internet across Amazon EC2 instances
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: To allow communication between the VPC and the internet.

Topic 1 Β· Question 25

A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices. Which best practice of the AWS Well-Architected Framework is the company following with this plan?

  • AIntegrate functional testing as part of AWS deployment.
  • BUse automation to deploy changes.
  • CDeploy the application to multiple locations.
  • DImplement loosely coupled dependencies. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Implement loosely coupled dependencies.

Topic 1 Β· Question 26

A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes. Which AWS service or tool will meet this requirement?

  • AIAM Access Analyzer
  • BAWS Artifact
  • CIAM credential report (correct answer)
  • DAWS Audit Manager
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: IAM credential report

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 27 Β· Select all that apply

A company wants to receive a notification when a specific AWS cost threshold is reached. Which AWS services or tools can the company use to meet this requirement? (Choose two.)

  • AAmazon Simple Queue Service (Amazon SQS)
  • BAWS Budgets (correct answer)
  • CCost Explorer
  • DAmazon CloudWatch (correct answer)
  • EAWS Cost and Usage Report
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: AWS Budgets Option D: Amazon CloudWatch

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Budgets alerts on cost and usage thresholds.

Topic 1 Β· Question 28

Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?

  • AAWS Artifact
  • BAmazon Connect
  • CAWS Chatbot
  • DAWS Knowledge Center (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Knowledge Center.

Topic 1 Β· Question 29 Β· Select all that apply

Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)

  • AConfigure the AWS provided security group firewall. (correct answer)
  • BClassify company assets in the AWS Cloud. (correct answer)
  • CDetermine which Availability Zones to use for Amazon S3 buckets.
  • DPatch or upgrade Amazon DynamoDB.
  • ESelect Amazon EC2 instances to run AWS Lambda on.
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Configure the AWS provided security group firewall. Option B: Classify company assets in the AWS Cloud.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 30 Β· Select all that apply

Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

  • AAvailability
  • BReliability (correct answer)
  • CScalability
  • DResponsive design
  • EOperational excellence (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Reliability Option E: Operational excellence.

Topic 1 Β· Question 31

Which AWS service or feature is used to send both text and email messages from distributed applications?

  • AAmazon Simple Notification Service (Amazon SNS) (correct answer)
  • BAmazon Simple Email Service (Amazon SES)
  • CAmazon CloudWatch alerts
  • DAmazon Simple Queue Service (Amazon SQS)
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Amazon Simple Notification Service (Amazon SNS)

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers.

Topic 1 Β· Question 32

A user needs programmatic access to AWS resources through the AWS CLI or the AWS API. Which option will provide the user with the appropriate access?

  • AAmazon Inspector
  • BAccess keys (correct answer)
  • CSSH public keys
  • DAWS Key Management Service (AWS KMS) keys
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Access keys.

Topic 1 Β· Question 33

A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours. Which pricing model enables the company to optimize costs and meet these requirements?

  • AReserved Instances
  • BSpot Instances (correct answer)
  • COn-Demand Instances
  • DDedicated Instances
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Spot Instances

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 34 Β· Select all that apply

What does the concept of agility mean in AWS Cloud computing? (Choose two.)

  • AThe speed at which AWS resources are implemented (correct answer)
  • BThe speed at which AWS creates new AWS Regions
  • CThe ability to experiment quickly (correct answer)
  • DThe elimination of wasted capacity
  • EThe low cost of entry into cloud computing
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: The speed at which AWS resources are implemented Option C: The ability to experiment quickly.

Topic 1 Β· Question 35

A company needs to block SQL injection attacks. Which AWS service or feature can meet this requirement?

  • AAWS WAF (correct answer)
  • BAWS Shield
  • CNetwork ACLs
  • DSecurity groups
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS WAF

Explanation

AWS WAF protects web applications from common exploits and malicious requests.

Topic 1 Β· Question 36

Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

  • AAWS Service Catalog
  • BAWS Systems Manager
  • CAWS IAM Access Analyzer (correct answer)
  • DAWS Organizations
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS IAM Access Analyzer

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 37

A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?

  • AContact the AWS Compliance team.
  • BDownload the reports from AWS Artifact. (correct answer)
  • COpen a case with AWS Support.
  • DGenerate the reports with Amazon Macie.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Download the reports from AWS Artifact.

Topic 1 Β· Question 38

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company’s direct responsibility?

  • ACost of application software licenses (correct answer)
  • BCost of the hardware infrastructure on AWS
  • CCost of power for the AWS servers
  • DCost of physical security for the AWS data center
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Cost of application software licenses.

Topic 1 Β· Question 39

A company is setting up AWS Identity and Access Management (IAM) on an AWS account. Which recommendation complies with IAM security best practices?

  • AUse the account root user access keys for administrative tasks.
  • BGrant broad permissions so that all company employees can access the resources they need.
  • CTurn on multi-factor authentication (MFA) for added security during the login process. (correct answer)
  • DAvoid rotating credentials to prevent issues in production applications.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Turn on multi-factor authentication (MFA) for added security during the login process.

Topic 1 Β· Question 40 Β· Select all that apply

Elasticity in the AWS Cloud refers to which of the following? (Choose two.)

  • AHow quickly an Amazon EC2 instance can be restarted
  • BThe ability to rightsize resources as demand shifts (correct answer)
  • CThe maximum amount of RAM an Amazon EC2 instance can use
  • DThe pay-as-you-go billing model
  • EHow easily resources can be procured when they are needed (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: The ability to rightsize resources as demand shifts Option E: How easily resources can be procured when they are needed.

Showing questions 21–40 of 719 Β· Page 2 of 36